{"id":"CVE-2026-57442","revision":"4fe155ce63d94daf961dd47570df0ceb","records":[{"revision":"4fe155ce63d94daf961dd47570df0ceb","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-57442","aliases":[],"title":"MCPVault: PathFilter restricted directories (.git/.obsidian/node_modules) only denied at vault root, not nested","description":"MCPVault is a lightweight Model Context Protocol server for safe access to files in an Obsidian vault. Prior to 0.11.5, PathFilter in src/pathfilter.ts uses root-anchored deny-list patterns, so nested .git, .obsidian, and node_modules path segments do not match the restriction and pass both isAllowed() and isAllowedForListing(). An attacker who influences a path selected by an AI agent can traverse nested repository or Obsidian metadata, read remote URLs or embedded tokens, or cause nested node_modules content to pollute the listAllTags index. This issue is fixed in version 0.11.5.","state":0,"publishedAt":"2026-09-15T17:50:48.077+00:00","modifiedAt":"2026-09-16T14:01:51.831+00:00","affected":[{"ecosystem":"Vendor product","name":"mcpvault","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"bitbonsai\",\n                    \"product\": \"mcpvault\",\n                    \"versions\": [\n                        {\n                            \"version\": \"< 0.11.5\",\n                            \"status\": \"affected\"\n                        }\n                    ]\n                }"}],"metrics":[{"system":"CVSS 4.0","vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N","score":6.9,"severity":"MEDIUM"}],"references":["https://github.com/bitbonsai/mcpvault/security/advisories/GHSA-9c83-rr99-vfwj","https://github.com/bitbonsai/mcpvault/issues/128","https://github.com/bitbonsai/mcpvault/commit/0adb43901e1a08e85e14b42a8df2442fabc0b64a","https://github.com/bitbonsai/mcpvault/commit/8795716b90d1c4090a82a58647e030763513f17e"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-57442","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-57442","identifiers":["CVE-2026-57442"]},"retained":false,"historicalAffected":[]}],"coverage":[]}